The problem is, how does the saas prove to you that you own the data and privacy is not violated? I see no way of doing it unless the customer owns the server.
TOS/Contract. Something like Dropbox. You do believe you own the data on Dropbox right? This is something Microsoft can do as an Azure service to counter Amazon Alexa and Google Assistant maybe.
